Employee record retention requirements vary by state, and the practical rule is simple: keep each record for the longest period that any applicable law demands. Federal statutes set floors ranging from one year for basic personnel files to thirty years for occupational exposure records, and many states stack longer windows on top, particularly for payroll and wage data. When a federal minimum and a state minimum both apply, the longer one controls.
Why State Rules Usually Decide the Timeline
Federal retention periods are the starting point, not the answer. Payroll records show the widest state-level variation. The Fair Labor Standards Act requires three years, but several states mandate six years of retention for wage records covering gross pay, deductions, hours worked, and any allowances claimed against the minimum wage. Most states fall somewhere in a three-to-six-year range.
The consequences of falling short also vary by jurisdiction. In some states, an employer who fails to maintain adequate payroll records faces a rebuttable presumption that the employee’s claimed hours and wages are correct. That presumption alone can cost far more than any statutory fine.
State wage-claim statutes of limitations create a second reason to look past the federal floor. If a state allows employees to bring back-pay claims covering four years of unpaid wages and you keep payroll records for only three, you have a one-year gap with no documentation to contest the claim. A sound retention policy uses the longer of the federal period or the state’s wage-claim limitations period, plus a buffer.
Payroll and Wage Records
Under 29 CFR Part 516, employers must preserve basic payroll records for every non-exempt worker for at least three years from the date of last entry. Those records include the employee’s full name, home address, date of birth if the worker is under 19, hours worked each day, total weekly hours, and the rate and method of pay.1eCFR. 29 CFR Part 516 – Records to Be Kept by Employers
Supporting documents follow a shorter federal timeline. Timecards, wage rate tables, and work schedules only need to be kept for two years. In a Department of Labor audit, the three-year records serve as the primary data and the two-year records verify accuracy.2U.S. Department of Labor. Fact Sheet 21 Recordkeeping Requirements Under the Fair Labor Standards Act
State law often extends both figures. Where a state requires six years for payroll, that six-year window covers the supporting timecards and schedules as well, because the underlying wage data cannot be verified without them.
Employment Tax Records
The IRS requires employers to keep all employment tax records for at least four years after the tax becomes due or is paid, whichever is later.3Internal Revenue Service. Topic No. 305, Recordkeeping This window is longer than the FLSA’s three-year payroll requirement and covers a broader set of documents: W-2s, W-4s, quarterly 941 filings, records of FICA and income tax withholding, and all supporting data. Employers who destroy wage records after three years under the FLSA framework leave themselves exposed on the tax side, because an employment tax audit can reach back the full four years.
Hiring and Anti-Discrimination Records
Under 29 CFR Part 1602, private employers must preserve any personnel or employment record for one year from the date it was created or the date the related personnel action was taken, whichever is later. For involuntary terminations, the one-year clock starts on the termination date.4U.S. Equal Employment Opportunity Commission. Summary of Selected Recordkeeping Obligations in 29 CFR Part 1602 Covered records include applications, resumes, and documentation of promotions, demotions, transfers, and separations.
Applications and resumes from candidates who were not hired follow the same one-year rule for most private employers. Educational institutions and state and local governments face a two-year requirement, as do federal contractors with at least 150 employees and a government contract worth $150,000 or more.5U.S. Equal Employment Opportunity Commission. Background Checks – What Employers Need to Know
The Age Discrimination in Employment Act adds another layer. Payroll records must be kept for three years, and any employee benefit plan or written seniority or merit system must be retained for the entire time it remains in effect plus one year after it ends.6U.S. Equal Employment Opportunity Commission. Recordkeeping Requirements
Litigation Holds Override Everything
When an EEOC charge is filed against your company, normal retention schedules stop mattering for the records involved. You must preserve all personnel and employment records relating to the charging party, anyone else allegedly affected, and all employees in similar positions. Those records must be kept until final disposition of the charge or any resulting lawsuit, including appeals. If the charge is not resolved through investigation and the employee receives a right-to-sue notice, “final disposition” means the later of the 90-day filing deadline or the end of litigation.6U.S. Equal Employment Opportunity Commission. Recordkeeping Requirements
I-9 Immigration Records
Every employer in the United States must complete a Form I-9 for each new hire, and the retention calculation trips people up. You must keep the form for three years after the hire date or one year after employment ends, whichever date comes later.7eCFR. 8 CFR 274a.2 – Verification of Identity and Employment Authorization For a long-tenured employee, the three-year-from-hire date passes while they are still working, so the one-year-after-termination date controls. For someone who leaves after six months, the three-year-from-hire date is later and controls instead. Calculate both dates for every separated employee and keep the file until the later one.
Medical, Safety, and Leave Records
Medical records require the most careful handling of any employment documentation, both in how they are stored and how long they are kept.
ADA Confidentiality
Under the ADA’s implementing regulation, any information about an applicant’s or employee’s medical condition or history must be collected on separate forms, kept in separate medical files, and treated as a confidential medical record. Supervisors and managers may only be told about necessary work restrictions or accommodations; first-aid personnel can be informed if a disability might require emergency treatment.8eCFR. 29 CFR 1630.14 – Medical Examinations and Inquiries Specifically Permitted Storing medical files alongside personnel files creates discrimination exposure even when the underlying decisions are legitimate.
OSHA Exposure and Medical Records
Occupational health records carry the longest retention periods in employment law. Under 29 CFR 1910.1020, employee exposure records must be preserved for at least 30 years, and medical records for workers exposed to hazardous substances must be kept for the duration of employment plus 30 years. These timelines reflect that many occupational diseases do not emerge until decades after exposure.9eCFR. 29 CFR 1910.1020 – Access to Employee Exposure and Medical Records
If an employer goes out of business, the regulation requires transferring these records to a successor employer. When no successor exists, the employer must notify affected current employees of their access rights at least three months before closing.9eCFR. 29 CFR 1910.1020 – Access to Employee Exposure and Medical Records
FMLA Leave Records
Employers covered by the Family and Medical Leave Act must keep FMLA-related records for at least three years. Required documentation includes the dates leave was taken (designated specifically as FMLA leave), the hours of leave when taken in increments of less than a full day, copies of employee leave notices, and records of any disputes about leave designation. Medical certifications and recertifications must be stored as confidential medical records in separate files, not in the standard personnel folder.10U.S. Department of Labor. FMLA Recordkeeping Requirements
Benefits and Retirement Plan Records
ERISA Section 107 requires plan sponsors to retain records supporting their Form 5500 filings for at least six years from the filing date. That covers plan documents, nondiscrimination test results, financial reports, fidelity bonds, and all supporting documentation. Six years is the floor, not the ceiling. Under ERISA Section 209, plan sponsors must keep benefit and distribution records long enough to prove that every participant received their due benefits. In practice, retain them until all benefits have been paid out and the audit window has closed, which can stretch for decades in pension plans with deferred vesting.
Performance and Disciplinary Files
Performance evaluations, disciplinary notices, and signed policy acknowledgments sit in a gray area where no single federal statute dictates a uniform timeline. The practical answer is driven by litigation risk. Most wrongful termination, breach-of-contract, and discrimination claims are governed by statutes of limitations that range from two to six years depending on the jurisdiction and the type of claim. Keeping performance and disciplinary files for at least the length of the longest applicable statute of limitations after separation is the sensible baseline.
These records are your primary defense when a former employee challenges a termination or demotion. A documented history of performance issues and progressive discipline shows the decision was based on job performance rather than a protected characteristic. Without them, you argue from memory while the former employee presents their version unchallenged.
Disciplinary warnings deserve special attention. Even when an employee’s performance improves after a warning, the original documentation should stay in the file. If that employee later reverts and is terminated, the prior history demonstrates both the pattern and your attempts to address it.
Workers’ Compensation and Personnel-File Access
Workers’ compensation records follow the same pattern of state-level divergence as payroll. Retention periods for injury reports, medical bills, and insurance correspondence range from roughly five to ten years depending on the jurisdiction. Many employers keep these files separate from both personnel and medical files to maintain confidentiality and streamline insurance audits.
No federal law gives employees a right to inspect their personnel files, but roughly half of states have enacted statutes granting that access. Response deadlines vary widely, from a few days to a “reasonable time” after the request. Some states also allow employees to submit written rebuttals to documents in their files. Employers operating in multiple states should adopt a single inspection policy that satisfies the strictest applicable rule.
Independent Contractor Documentation
Misclassification disputes are among the fastest-growing areas of employment enforcement, and your records are the first thing auditors examine. The IRS looks at whether the hiring party controls the result of the work versus the methods used to perform it, and payments to independent contractors must be reported on Form 1099-NEC.11Internal Revenue Service. Independent Contractor Defined Contracts, invoices, scope-of-work documents, and evidence of how the relationship actually functioned should be retained for at least the IRS’s four-year employment tax window.3Internal Revenue Service. Topic No. 305, Recordkeeping If a state unemployment or labor agency later reclassifies the workers as employees, this documentation is what you use to contest the determination.
Storage and Destruction
Both paper and electronic storage satisfy federal requirements as long as the records are legible, printable on demand, and organized well enough that an auditor can locate specific information without unreasonable delay. Electronic systems must include controls that prevent alteration or deletion. Indexed, searchable formats like PDF or structured databases meet this standard comfortably.
Destroying records is just as regulated as keeping them. Under the FTC’s Disposal Rule at 16 CFR Part 682, any business that maintains consumer information must take reasonable steps to prevent unauthorized access when discarding it. For paper records containing Social Security numbers or financial data, that means shredding, burning, or pulverizing. For electronic media, it means wiping data beyond recovery or physically destroying the storage device.12eCFR. 16 CFR Part 682 – Disposal of Consumer Report Information and Records
A written destruction schedule solves two problems at once. It stops the indefinite accumulation of sensitive data that would increase your exposure in a breach, and it creates a documented routine that protects you from allegations of targeted destruction. Shredding files on a regular, pre-existing schedule looks like standard practice rather than evidence tampering.
The schedule should pause automatically whenever litigation or a government investigation is reasonably anticipated. Destroying records subject to a litigation hold can result in court sanctions and adverse inference instructions that effectively hand the case to the other side. Build the pause into the policy so it triggers without requiring a judgment call in the moment.